Wordfence Intelligence

Title	CVE ID	CVSS	Vector	Date
I LOVE IT! < 2.4 - Multiple Vulnerabilities		10.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N	May 16, 2013
Covert VideoPress (All Known Versions) - Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 16, 2013
S3 Video Plugin < 0.98 - Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 15, 2013
Debug Bar <= 0.8 - Reflected Cross-Site Scripting	CVE-2013-10021	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 15, 2013
Newsletter <= 3.2.6 - Reflected Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 14, 2013
Search and Share <= 0.9.3 - Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 12, 2013
Securimage-WP Plugin < 3.5.1 - Reflected Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 11, 2013
WP Photo Album Plus < 5.0.3 - Cross-Site Scripting	CVE-2013-3254	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 6, 2013
Music <= 1.5 - Multiple Vulnerabilities		10.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N	April 24, 2013
StudioZen Theme (All Versions) - Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 24, 2013
StudioZen <= 1.6 - Multiple Vulnerabilities		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 24, 2013
Feather12 (Unkown Versions) - Multiple Vulnerabilities		10.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N	April 24, 2013
Photocrati (Unknown Versions) - Multiple Vulnerabilities		10.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N	April 24, 2013
Imperial Fairytale Theme (All Versions) - Multiple Vulnerabilities		10.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N	April 24, 2013
EELV Newsletter <= 3.3.0 - Reflected Cross-Site Scripting	CVE-2013-10028	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 17, 2013
Traffic Analyzer < 3.4.2 - Cross-Site Scripting	CVE-2013-3526	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 9, 2013
WP-DownloadManager Plugin < 1.61 - Cross-Site Scripting	CVE-2013-2697	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 8, 2013
Toolset Types <= 1.2.1.1 - Cross-Site Scripting		5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	April 4, 2013
Feedweb < 1.9 - Authenticated (Admin+) Stored Cross-Site Scripting	CVE-2013-3720	5.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N	April 3, 2013
Kioskprox (Unkown Versions) - Cross-Site Scripting		6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	April 3, 2013

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

Vulnerabilities protected by our XSS: Cross Site Scripting firewall rule

Showing 6361-6380 of 6,652 Vulnerabilities